Black Box LR1102A-T1/E1, LR1112A-T1/E1, LR1114A-T1/E1 10.4.3Port Address Translation Many to one

NAT Configuration Examples

10.4.3Port Address Translation (Many to one)

Figure 21 Mapping Multiple NAT Addresses to One Public IP Address

10.1.1.1

10.1.1.2

INTERNET

50.1.1.5

10.1.1.3

NAT allows multiple IP addresses to be mapped to one address.

There are two methods to configure Port Address Translation (PAT) on the Black Box gateway. In the first method, specify the IP address to the nat-ipparameter in the policy command. In the second method, create a pool of type PAT and then attach it to the policy.

In PAT, multiple hosts can share the same IP address.

The PAT configuration shown in Figure 21 includes:

„Private network address: 10.1.1.1—10.1.1.3

„PAT address: 50.1.1.5

Method:1 – Specifying NAT address with the policy command

To configure this method of PAT, add the policy with the source IP address range, then specify the nat-ipaddress in the policy command:

Blackbox/configure> firewall corp

Blackbox/configure/firewall corp> policy 2 out address 10.1.1.1

10.1.1.3any any nat-ip 50.1.1.5 Blackbox/configure/firewall corp/policy 2 out> exit 2 Blackbox/configure>

Method:2 – Attaching nat pool to the policy

To configure the second type of NAT, create a NAT pool with type pat and specify the IP address. Then add the policy with the source IP address range. Finally, attach the NAT pool to the policy.

77